allow empty realms in openid requests